zjxiong7019
驱动牛犊
驱动牛犊
  • 注册日期2006-11-11
  • 最后登录2007-09-28
  • 粉丝0
  • 关注0
  • 积分560分
  • 威望60点
  • 贡献值0点
  • 好评度59点
  • 原创分0分
  • 专家分0分
阅读:1367回复:1

高手进来看看我的tdifw1.4.4配置文件,怎么不对啊?谢谢了。

楼主#
更多 发布于:2007-01-12 21:56
  建一个section叫web。
【web】
ALLOW TCP IN FROM ANY TO SELF:80
怎么不起作用呢???


多谢了。
zjxiong7019
驱动牛犊
驱动牛犊
  • 注册日期2006-11-11
  • 最后登录2007-09-28
  • 粉丝0
  • 关注0
  • 积分560分
  • 威望60点
  • 贡献值0点
  • 好评度59点
  • 原创分0分
  • 专家分0分
沙发#
发布于:2007-01-12 21:58
我的配置如下:
[_signature_]
_signature_=$tdi_fw$

[_config_]
eventlog_allow=0
eventlog_deny=0
eventlog_error=0

[_main_]
_default_=custom localnet localhost
%SystemRoot%\system32\telnet.exe=allow_all
C:\Program Files\Internet Explorer\IEXPLORE.EXE=RulesBrowser
C:\WINNT\system32\inetsrv\inetinfo.exe=RulesWeb
C:\Program Files\RhinoSoft.com\Serv-U\ServUDaemon.exe=RulesFtp


[_users_]
_default_=*
NT AUTHORITY\SYSTEM=*


[_hosts_]
ANY=0.0.0.0/0
SELF=0.0.0.0/0
LOCALNET=192.168.0.1/24
localhost=127.0.0.1

DNS_SERVER=202.120.2.101
ZHUJI=192.168.0.111/24
LEILEI=192.168.0.124/24

[custom]
CustomDns: ALLOW UDP * FROM SELF TO DNS_SERVER:53 NOLOG  
CustomLocalOut: ALLOW TCP OUT FROM SELF TO LOCALHOST NOLOG  
CustomLocalIn: ALLOW TCP IN FROM LOCALHOST TO SELF NOLOG  
;CustomNetbios only if you use microsoft network and shared files !  
;CustomNetbiosTcp: ALLOW TCP OUT FROM SELF TO ANY:137-139 NOLOG  
;CustomNetbiosUdp: ALLOW UDP OUT FROM SELF TO ANY:137-139 NOLOG

[localnet]
LocalnetTcp: ALLOW TCP * FROM SELF TO LOCALNET
LocalnetNetbt: ALLOW UDP * FROM SELF:137-138 TO LOCALNET:137-138 NOLOG
LocalnetUdp: ALLOW UDP * FROM SELF TO LOCALNET
LocalnerRawip: ALLOW RawIP * FROM SELF TO LOCALNET NOLOG
LocalnetBroadcast: ALLOW UDP OUT FROM SELF TO 255.255.255.255

[localhost]
LocalhostSelf: ALLOW * * FROM SELF TO LOCALHOST NOLOG

[RulesFtp]
Ftpself:    ALLOW * * FROM SELF TO SELF:21
Ftpzhuji:      ALLOW  * * FROM ZHUJI TO SELF:21
Ftprest:      DENY  * * FROM ANY TO SELF:21

[RulesWeb]
ALLOW TCP IN FROM ANY TO SELF:80

[RulesBrowser]
BrowserDns: ALLOW UDP * FROM SELF TO ANY:53 NOLOG
BrowserHttp: ALLOW TCP OUT FROM SELF TO ANY:80 NOLOG
BrowserHttps: ALLOW TCP OUT FROM SELF TO ANY:443 NOLOG
BrowserBlockrest: DENY * * FROM SELF TO ANY NOLOG

[allow_all]
Ruleallowall: ALLOW  * * FROM SELF TO ANY
游客

返回顶部